Put login things in /login/ all css, images, php, html etc. Still it is scattered over all kind of locations.